Analysis
-
max time kernel
150s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240319-en -
resource tags
-
submitted
27/03/2024, 16:06
General
-
Target
IDBoanMon.exe
-
Size
703KB
-
MD5
0ccf16a3c9d76eada96efd81e341fc5b
-
SHA1
1dd0a95554d0500c0784a0570cff30acf996ef48
-
SHA256
3bc95b546a70fdf885feda183288dcf4535719a4d7411479bd17de75197dbcc6
-
SHA512
40b6100f03e4d14d7871dc471322dee43da5ce554ca029e693eb0211dcb5c4ec9f692cb2cf12765ff902b2c32e9be504cb461b313dcd3ad8a246ba86e61496c1
-
SSDEEP
6144:/sUak+OtMzb5S+91osQ5HAsOIQE6f3BLL9+nMQxfgNLfzYWE:/sUak+oMzbUAsz6f3BLx+nMQxYNLfn
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDBoanMon.exe"C:\Users\Admin\AppData\Local\Temp\IDBoanMon.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3728 --field-trial-handle=2256,i,5035714022000286426,16259316383734940314,262144 --variations-seed-version /prefetch:81⤵